|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
🇿🇦
Megasurf
|
|
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.79.161.81 - - [06/Nov/2026:04:31:22 +0100] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) App ...
show more
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.79.161.81 - - [06/Nov/2026:04:31:22 +0100] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.79.161.81 - - [06/Nov/2026:04:31:22 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.79.161.81 - - [06/Nov/2026:04:31:25 +0100] "GET /z9x8c7v6b5-debug-trigger-liftcentraal.nl HTTP/2.0" 404 17807 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.79.161.81 - - [06/Nov/2026:04:31:25 +0100] "GET /build/manifest.json HTTP/2.0" 404 17807 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on flow
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇦
URAN Publishing Service
|
|
[06/Nov/2026:04:30:05 +0200] -- 34.79.161.81 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /ngsw.json HTTP/1.1
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
cmbplf
|
|
7.789 requests from abuseipdb.com blacklisted IP (1w6d23h)
|
Brute-Force
Bad Web Bot
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:23:58.879662 2026] [security2:error] [pid 12872:tid 12 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:23:58.879662 2026] [security2:error] [pid 12872:tid 12872] [client 34.79.161.81:57638] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.weathercarib.com|F|2"] [data ".weathercarib.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.weathercarib.com"] [uri "/z9x8c7v6b5-debug-trigger-www.weathercarib.com"] [unique_id "au0eHsXGNm2FvwSHA-NErQAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /laravel../.env
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:48:27.869683 2026] [security2:error] [pid 14278:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:48:27.869683 2026] [security2:error] [pid 14278:tid 14288] [client 34.79.161.81:47562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dcsindo.com"] [uri "/prisma/.env"] [unique_id "au0VyyAbF7DstA5sc1fz3AAAAMg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:09:07.687269 2026] [security2:error] [pid 27198:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.79.161.81 (81.161.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:09:07.687269 2026] [security2:error] [pid 27198:tid 27198] [client 34.79.161.81:48316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.scadco.com"] [uri "/.env.credentials"] [unique_id "au0Mk1pC9OLbs5FuoaSSbgAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on ozone
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.79.161.81 - - [05/Nov/2026:22:57:42 +0100] "GET /.git/config%3F.css HTTP/2.0" 404 123162 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1. ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.79.161.81 - - [05/Nov/2026:22:57:42 +0100] "GET /.git/config%3F.css HTTP/2.0" 404 123162 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Bot / scanning and/or hacking attempts: [187/186] done: stream 373, GET /public../.env, GET /lerna.json HTTP/2.0, GET /.env.secret HTTP/2.0
|
Hacking
Web App Attack
|
|
🇳🇱
debestelapp
|
|
|
Web App Attack
|
